This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/YgTu92EMlSHH6hAx-wKAfH0f5HA.roa File: YgTu92EMlSHH6hAx-wKAfH0f5HA.roa (raw, json) Hash identifier: w4NEQ8Pa4tghHvqnWHIsU9oi0/GjMWGF/km3INOctDg= Subject key identifier: 62:04:EE:F7:61:0C:95:21:C7:EA:10:31:FB:02:80:7C:7D:1F:E4:70 Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91 Certificate serial: 019B77C66CF724F6591EE17085504067E5D4 Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/YgTu92EMlSHH6hAx-wKAfH0f5HA.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64462 IP address blocks: 185.83.110.0/24 maxlen: 24 185.83.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:f7:24:f6:59:1e:e1:70:85:50:40:67:e5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6204eef7610c9521c7ea1031fb02807c7d1fe470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:6a:29:18:6b:31:7d:23:72:a3:63:32:35: b4:59:3f:a6:bf:71:62:a2:85:88:80:e8:bc:80:3c: e6:d9:4d:00:0f:41:f6:27:c6:84:94:c5:be:0e:42: 3f:42:dc:bb:d9:95:25:19:5b:67:db:07:51:5f:f1: c3:fb:a0:c0:ec:60:ff:cc:da:13:b7:e7:07:e8:ad: c3:08:e2:fd:64:a7:0a:e8:06:95:f3:40:45:4c:90: 99:f0:65:56:67:f5:ad:da:ee:04:5e:27:c2:88:93: 16:5e:d5:6f:db:65:cd:52:85:52:4d:7f:a7:e3:ab: c5:40:ef:2d:52:57:34:e6:13:6d:43:4e:b9:d4:91: 23:68:09:05:55:6a:21:6c:44:fe:4e:be:23:3d:00: 45:33:25:94:db:92:dc:fb:81:ad:13:fa:68:85:96: 9e:aa:62:51:d0:14:48:f8:9f:ee:7f:10:47:01:b3: 96:b4:68:95:bd:30:a8:4d:7e:94:58:a1:95:df:b3: b0:59:1f:67:71:8a:59:3e:1d:67:2e:15:24:db:af: e3:b0:27:f2:a1:69:cb:a5:bd:19:24:c6:3f:97:56: 5c:e7:0c:fd:bb:47:1c:bd:00:5b:7c:af:d5:c9:42: 94:3d:da:b9:3f:62:97:ec:90:57:be:41:cc:8c:9e: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:04:EE:F7:61:0C:95:21:C7:EA:10:31:FB:02:80:7C:7D:1F:E4:70 X509v3 Authority Key Identifier: keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/YgTu92EMlSHH6hAx-wKAfH0f5HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.110.0/23 Signature Algorithm: sha256WithRSAEncryption 18:5b:2a:3a:59:b2:66:f7:60:8e:ac:b0:12:f3:ca:9d:f3:34: 9d:74:1e:4e:60:bc:e2:9c:63:92:d4:c6:66:e3:0a:54:96:5d: 49:87:a5:43:9e:51:6a:9b:6b:b4:4f:65:a9:ba:0f:60:b7:66: 73:41:c1:70:fd:d4:fe:58:f5:f9:26:7c:58:75:c8:fc:3f:0b: f8:0c:7c:f6:ae:f0:de:64:c2:18:c4:8d:fd:e0:d3:7e:0d:ea: a9:e5:7e:76:94:61:6e:85:46:d1:dd:76:ce:ef:68:95:e4:e2: 39:ae:00:27:33:69:a9:c8:52:96:4a:0c:2d:8d:2e:25:9a:74: 30:2a:3b:a2:d5:7e:83:eb:30:6c:64:50:b4:5f:f6:80:07:73: 08:24:c1:62:b5:50:22:e0:fc:89:53:72:06:38:5f:03:11:98: 8e:f3:2e:ac:c6:38:df:3c:56:31:98:db:df:2c:b0:95:99:43: c4:4c:21:da:29:78:db:b1:33:6a:31:7e:4f:08:c3:ca:f9:53: d9:27:12:17:64:1b:95:fa:29:be:53:eb:e4:8c:56:38:2b:c7: a8:d5:90:3d:67:d2:12:01:d8:32:ec:3e:71:3c:7f:f8:14:b9: 7d:34:0d:8e:bb:a5:ba:fe:1c:d4:11:e2:4b:eb:a8:f4:6e:a3: a1:d4:3d:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmz3JPZZHuFwhVBAZ+XUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi MjJiOTEwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjA0ZWVmNzYxMGM5NTIxYzdlYTEwMzFmYjAyODA3YzdkMWZlNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB5qKRhrMX0jcqNjMjW0WT+mv3Fi ooWIgOi8gDzm2U0AD0H2J8aElMW+DkI/Qty72ZUlGVtn2wdRX/HD+6DA7GD/zNoT t+cH6K3DCOL9ZKcK6AaV80BFTJCZ8GVWZ/Wt2u4EXifCiJMWXtVv22XNUoVSTX+n 46vFQO8tUlc05hNtQ0651JEjaAkFVWohbET+Tr4jPQBFMyWU25Lc+4GtE/pohZae qmJR0BRI+J/ufxBHAbOWtGiVvTCoTX6UWKGV37OwWR9ncYpZPh1nLhUk26/jsCfy oWnLpb0ZJMY/l1Zc5wz9u0ccvQBbfK/VyUKUPdq5P2KX7JBXvkHMjJ5RcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIE7vdhDJUhx+oQMfsCgHx9H+RwMB8GA1UdIwQY MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt NzQzNzY1YmQwZjNlLzEvWWdUdTkyRU1sU0hINmhBeC13S0FmSDBmNUhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVNuMA0G CSqGSIb3DQEBCwUAA4IBAQAYWyo6WbJm92COrLAS88qd8zSddB5OYLzinGOS1MZm 4wpUll1Jh6VDnlFqm2u0T2Wpug9gt2ZzQcFw/dT+WPX5JnxYdcj8Pwv4DHz2rvDe ZMIYxI394NN+Deqp5X52lGFuhUbR3XbO72iV5OI5rgAnM2mpyFKWSgwtjS4lmnQw Kjui1X6D6zBsZFC0X/aAB3MIJMFitVAi4PyJU3IGOF8DEZiO8y6sxjjfPFYxmNvf LLCVmUPETCHaKXjbsTNqMX5PCMPK+VPZJxIXZBuV+im+U+vkjFY4K8eo1ZA9Z9IS Adgy7D5xPH/4FLl9NA2Ou6W6/hzUEeJL66j0bqOh1D0q -----END CERTIFICATE-----Generated at Mon Jan 26 10:28:21 2026 by rpki-client